From 44b9d80dab38fc4a4f63fe30e93d61d271e7cf08 Mon Sep 17 00:00:00 2001
From: Jan Kowalleck <jan.kowalleck@gmail.com>
Date: Mon, 12 May 2025 12:43:37 +0200
Subject: [PATCH] chore: GH workflow permissions

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
---
 .github/workflows/python.yml  | 2 ++
 .github/workflows/release.yml | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index 94e6e000..ceb608e2 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -17,6 +17,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 env:
   REPORTS_DIR: CI_reports
   PYTHON_VERSION_DEFAULT: "3.11"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3f56f252..b059ca64 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,6 +35,8 @@ concurrency:
   group: deploy
   cancel-in-progress: false  # prevent hickups with semantic-release
 
+permissions: {}
+
 env:
   PYTHON_VERSION_DEFAULT: "3.11"
   POETRY_VERSION: "1.8.1"